Author: joeyh
Date: 2009-12-09 21:14:22 +0000 (Wed, 09 Dec 2009)
New Revision: 13503
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-12-09 20:21:15 UTC (rev 13502)
+++ data/CVE/list 2009-12-09 21:14:22 UTC (rev 13503)
@@ -1,8 +1,28 @@
-CVE-2009-4228 [xfig stack-consumption DoS]
+CVE-2009-4236 (The process function in ...)
+ TODO: check
+CVE-2009-4235 (acpid 1.0.4 sets an unrestrictive umask, which might allow local
users ...)
+ TODO: check
+CVE-2009-4234 (Cross-site scripting (XSS) vulnerability in ...)
+ TODO: check
+CVE-2009-4233 (Cross-site scripting (XSS) vulnerability in
modules/mod_yj_whois.php ...)
+ TODO: check
+CVE-2009-4232 (The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does
not ...)
+ TODO: check
+CVE-2009-4231 (Directory traversal vulnerability in as/lib/plugins.php in
SweetRice ...)
+ TODO: check
+CVE-2009-4230 (Multiple stack-based buffer overflows in src/Task.cc in the
FastCGI ...)
+ TODO: check
+CVE-2009-4229 (Multiple SQL injection vulnerabilities in ActiveWebSoftwares
Active ...)
+ TODO: check
+CVE-2009-4226 (Race condition in the IP module in the kernel in Sun OpenSolaris
...)
+ TODO: check
+CVE-2009-4225 (Stack-based buffer overflow in the PestPatrol ActiveX control
...)
+ TODO: check
+CVE-2009-4228 (Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and
...)
- xfig <unfixed>
TODO: check
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=543905
-CVE-2009-4227 [xfig read_1_3_textobject issue]
+CVE-2009-4227 (Stack-based buffer overflow in the read_1_3_textobject function
in ...)
- xfig 1:3.2.5.b-1 (bug #559274)
TODO: check
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=543905
@@ -420,8 +440,8 @@
RESERVED
CVE-2009-4034
RESERVED
-CVE-2009-4033
- RESERVED
+CVE-2009-4033 (A certain Red Hat patch for acpid 1.0.4 effectively triggers a
call to ...)
+ TODO: check
CVE-2009-4031 (The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86
...)
- linux-2.6 <unfixed> (low)
[etch] - linux-2.6 <not-affected> (kvm introduced in 2.6.25)
@@ -532,8 +552,7 @@
RESERVED
CVE-2009-3995
RESERVED
-CVE-2009-3994 [devil buffer overflow]
- RESERVED
+CVE-2009-3994 (Stack-based buffer overflow in the GetUID function in ...)
- devil 1.7.8-6 (low; bug #560080)
CVE-2009-3993
RESERVED
@@ -918,8 +937,8 @@
RESERVED
CVE-2009-3845
RESERVED
-CVE-2009-3844
- RESERVED
+CVE-2009-3844 (Unspecified vulnerability in HP OpenView Data Protector
Application ...)
+ TODO: check
CVE-2009-3843 (HP Operations Manager 8.10 on Windows contains a
"hidden account" in ...)
NOT-FOR-US: HP Operations Manager
CVE-2009-3842 (Unspecified vulnerability on the HP Color LaserJet M3530
Multifunction ...)
@@ -1641,8 +1660,8 @@
NOT-FOR-US: eTrust Antivirus
CVE-2009-3587 (Unspecified vulnerability in the arclib component in the
Anti-Virus ...)
NOT-FOR-US: eTrust Antivirus
-CVE-2009-3586
- RESERVED
+CVE-2009-3586 (Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier
allows ...)
+ TODO: check
CVE-2009-3585 (Session fixation vulnerability in
html/Elements/SetupSessionCookie in ...)
{DSA-1944-1}
- request-tracker3.4 <removed>
@@ -4128,8 +4147,8 @@
[etch] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.30)
[lenny] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.30)
- linux-2.6.24 <not-affected> (vulnerability introduced in 2.6.30)
-CVE-2009-2843
- RESERVED
+CVE-2009-2843 (Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1
...)
+ TODO: check
CVE-2009-2842 (Apple Safari before 4.0.4 does not properly implement certain
(1) Open ...)
TODO: check
CVE-2009-2841 (WebKit in Apple Safari before 4.0.4 on Mac OS X does not perform
the ...)
@@ -4434,8 +4453,8 @@
RESERVED
CVE-2009-2750
RESERVED
-CVE-2009-2749
- RESERVED
+CVE-2009-2749 (Feature Pack for Communications Enabled Applications (CEA)
before ...)
+ TODO: check
CVE-2009-2748
RESERVED
CVE-2009-2747
@@ -7908,10 +7927,10 @@
RESERVED
CVE-2009-1570 (Integer overflow in the ReadImage function in ...)
- gimp 2.6.7-1.1 (medium; bug #555929)
-CVE-2009-1569
- RESERVED
-CVE-2009-1568
- RESERVED
+CVE-2009-1569 (Multiple stack-based buffer overflows in Novell iPrint Client
4.38, ...)
+ TODO: check
+CVE-2009-1568 (Stack-based buffer overflow in ienipp.ocx in Novell iPrint
Client ...)
+ TODO: check
CVE-2009-1567 (Multiple stack-based buffer overflows in the Lateral Arts
Photobox ...)
TODO: check
CVE-2009-1566 (Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio
...)
@@ -8772,8 +8791,7 @@
NOT-FOR-US: Perl Nopaste
CVE-2009-1299
RESERVED
-CVE-2009-1298 [linux-2.6: ipv4 denial-of-service]
- RESERVED
+CVE-2009-1298 (The ip_frag_reasm function in ipv4/ip_fragment.c in Linux kernel
...)
{DTSA-204-1}
- linux-2.6 2.6.32-1 (low)
[etch] - linux-2.6 <not-affected> (introduced in 2.6.29)